5d97dcea29582f4da2e9f0a7730eefdeddd1b8846ba803c8594d0d1b960957a9

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 09:40

Target
2026-08-10_c1dc2d7db4a8bf97775d6b894ded0baa_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe
Size 12.0MB
Sample260810-lndqeawbpg
SHA256 5d97dcea29582f4da2e9f0a7730eefdeddd1b8846ba803c8594d0d1b960957a9
MD5 c1dc2d7db4a8bf97775d6b894ded0baa
SHA1 10545964aa2a89c6823635154dc87d4a7607b920
SHA512 0f0380ac81da6c5bdc697a455a777c1108bb8237e47f9a60c3c1dc6781a0fa1a9da58a82e834521fbed05085f93b8a12e3faaad4da9d2d43f9ed40fabf595cd7
SSDEEP 98304:P7a31+h10G9rdNleC+TOEIScEPdJvRayhNxuPMOYRvgR+1rXb6pGn+Blc:+ibZwCPGPhAMfvhrupMIW
TLSH
T10CC69E03F69681ECC06EC074835AA333FB72F8894A3472AB6BD44A212F66F505F5D759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5088	2026-08-10_c1dc2d7db4a8bf97775d6b894ded0baa_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_c1dc2d7db4a8bf97775d6b894ded0baa_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_c1dc2d7db4a8bf97775d6b894ded0baa_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:5088